Privacy policy
Vault holds your email address, your sign-in method, the dates and identifiers of your records, your dashboard layout, and an encrypted blob per record that we cannot read. It does not hold your figures in readable form, your recovery phrase, or any bank credential.
What we hold
Your email address and the sign-in methods attached to it. The identifiers, foreign keys, dates and record types that give the database its structure. Your dashboard layout. And, for every record with money in it, ciphertext we have no key for.
What we do not hold
Your figures in readable form. Your recovery phrase, which is never stored and never transmitted. Any bank credential, because none is ever requested. Any transaction history, because none is ever imported.
What we never do
Sell, rent, or share your data with an advertiser, a broker, or an advisor. There is no analytics tag on this site, no third-party script, and no cookie banner, because there is nothing to consent to.
Third parties
Market prices and exchange rates are fetched from public providers through our own stateless proxy, which sends no user identifier. Hosting and database providers hold the ciphertext described above and can no more read it than we can.
Your rights
Export everything at any time, in two formats. Delete your account, and with it the ciphertext, from Settings. Neither needs a support request.
Questions about this policy can be sent to the address in your account settings.